
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
File: ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa (raw, json)
Hash identifier: Nrs7YYLIUsOgwfLueQKGfqaH3nNRFlj8u9+fIxYqvP4=
Subject key identifier: 3B:EC:2F:5C:65:13:4A:6B:35:BE:F1:7C:A5:F2:0C:C4:5C:4C:F0:52
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78CE95E0634D7594205FCD50DC907322C40FDE25
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
Signing time: Fri 08 May 2026 02:21:14 +0000
ROA not before: Fri 08 May 2026 02:21:14 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.170.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ce:95:e0:63:4d:75:94:20:5f:cd:50:dc:90:73:22:c4:0f:de:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:21:14 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=c487c1d55c3f7722a9de2fe4ac35713558acd1c7db2c3f7db29a33fbb6fb9631, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:c9:22:88:62:e2:dc:4d:09:a3:22:d4:aa:
9e:e1:fb:48:3e:b4:96:08:c6:46:47:06:ac:6e:29:
a7:83:4d:96:47:99:61:a9:b5:ab:e3:05:36:36:97:
76:50:6e:b5:51:ba:58:63:d0:f1:0a:dd:db:25:b6:
2b:40:6d:9f:5e:55:3a:d2:12:a6:53:cc:52:e1:ac:
a8:9d:99:f8:24:ef:59:6b:2a:ef:6e:05:f7:82:31:
a8:2e:24:a6:0e:a9:d5:a3:84:e7:6d:2a:9c:c4:fd:
b7:cd:a8:29:5b:d8:c0:91:1a:39:3d:fd:6b:d8:ef:
4a:1e:c2:28:21:44:1c:a9:42:3e:8a:a0:78:bf:7a:
b0:09:44:7a:53:84:67:cd:3e:b0:c1:36:9d:5d:83:
0d:35:52:ad:62:18:57:90:ed:d9:19:9c:68:a0:c2:
f1:d9:4b:0b:64:c4:6a:b1:cd:c7:09:28:6f:69:27:
bd:16:ee:36:1a:fc:e6:26:d7:f8:2e:6f:7a:58:0c:
44:0b:bc:57:69:d1:3a:ab:2c:fb:d6:0a:77:73:2b:
d2:12:18:de:4e:3e:ef:fa:ff:98:94:de:f1:a3:04:
0f:5f:fd:2a:18:e0:14:25:33:a9:73:c3:06:a3:14:
6b:c6:f0:31:ad:4f:02:da:b4:65:48:ce:a9:84:36:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:2F:5C:65:13:4A:6B:35:BE:F1:7C:A5:F2:0C:C4:5C:4C:F0:52
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.170.0.0/15
Signature Algorithm: sha256WithRSAEncryption
97:5c:bd:10:b6:61:e6:65:8c:71:3f:02:4c:bd:ea:81:6a:78:
b4:e3:35:79:bb:4b:3a:d7:b8:5e:08:07:d5:89:d2:b6:90:fb:
b9:bd:90:40:95:42:fa:89:fd:1f:96:92:2c:3f:c0:3e:aa:fd:
57:12:9c:11:62:40:ab:4f:64:b7:b3:92:10:38:88:27:59:08:
f8:6e:30:1c:80:de:48:95:a1:c7:62:b1:0f:5b:42:02:41:b5:
e7:15:24:d9:ad:2e:b7:ad:fb:4d:df:10:ac:a7:df:a4:09:f1:
f4:2f:1e:28:56:b0:97:49:9c:8f:81:81:30:d0:09:2c:a6:6a:
6e:4a:5a:30:98:16:c0:98:dd:67:60:00:e9:72:7e:76:74:6a:
7a:f4:78:62:bd:c0:15:85:e3:c5:a5:cc:6d:8b:7e:45:2f:68:
73:fc:e6:e2:58:f7:f2:b4:02:6a:85:8f:7b:7f:cc:aa:15:1e:
43:24:41:9e:6e:37:10:1d:75:39:aa:bd:e0:e8:28:92:5f:e2:
a6:e4:f9:84:88:a0:56:56:4d:8e:f1:0f:1f:38:c6:d1:73:b9:
d4:f1:ed:fd:28:7a:8a:6f:3e:26:bf:9d:4c:89:d1:cb:04:b8:
59:d4:b4:5c:2a:86:9b:13:6d:71:e7:13:92:72:13:75:d8:a2:
3f:34:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:27:18 2026 by rpki-client